root/srvrevproxy02_nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

neu aufbau (zusammenfuehrung) der datei mit dem offiziellen beispiel von synapse

Browse Source
This commit is contained in:
root
2025-06-26 13:25:04 +02:00
parent 2c6fe7c7fc
commit 6e3d46b57d
1 changed files with 48 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
sites-available/matrix.conf
View File

@@ -1,52 +1,59 @@
add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"; add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
# Redirect HTTP to HTTPS
server { server {
listen 10.0.0.29:80; listen 10.0.0.29:80;
server_name matrix.egonetix.de; server_name matrix.egonetix.de;
return 301 https://$server_name$request_uri; return 301 https://$server_name$request_uri;
} }
# HTTPS for client traffic (port 443)
server { server {
listen 10.0.0.29:443 http2 ssl; listen 10.0.0.29:443 ssl http2;
# SSL config server_name matrix.egonetix.de;
ssl on;
ssl_certificate /etc/letsencrypt/live/matrix.egonetix.de/fullchain.pem; ssl_certificate /etc/letsencrypt/live/matrix.egonetix.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/matrix.egonetix.de/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/matrix.egonetix.de/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl_dhparam /etc/ssl/certs/dhparam.pem;
# Make site accessible from http://localhost/
server_name matrix.egonetix.de;
access_log /var/log/nginx/matrix-access.log; access_log /var/log/nginx/matrix-access.log;
error_log /var/log/nginx/matrix-error.log; error_log /var/log/nginx/matrix-error.log;
set $upstream 10.0.0.48; set $upstream 10.0.0.48;
location /_matrix { location ~ ^(/_matrix|/_synapse/client) {
proxy_pass http://$upstream:8008; proxy_pass http://$upstream:8008;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
client_max_body_size 50M;
proxy_http_version 1.1;
} }
} }
# HTTPS for federation traffic (port 8448)
server { server {
listen 10.0.0.29:8448 http2 ssl; listen 10.0.0.29:8448 ssl http2;
# SSL config server_name matrix.egonetix.de;
ssl on;
ssl_certificate /etc/letsencrypt/live/matrix.egonetix.de/fullchain.pem; ssl_certificate /etc/letsencrypt/live/matrix.egonetix.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/matrix.egonetix.de/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/matrix.egonetix.de/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl_dhparam /etc/ssl/certs/dhparam.pem;
# Make site accessible from http://localhost/
server_name matrix.egonetix.de;
access_log /var/log/nginx/matrix-access.log; access_log /var/log/nginx/matrix-access.log;
error_log /var/log/nginx/matrix-error.log; error_log /var/log/nginx/matrix-error.log;
set $upstream 10.0.0.48; set $upstream 10.0.0.48;
location /_matrix { location ~ ^(/_matrix|/_synapse/client) {
proxy_pass http://$upstream:8008; proxy_pass http://$upstream:8008;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
client_max_body_size 50M;
proxy_http_version 1.1;
} }
} }